Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft
File:                     pbJlTkMrdNyNpm2BayYM_8gXMXU.mft (raw, json)
Hash identifier:          m29DTj5SNmSMO6j9m9Rw3gWSBb4UBUUd3/yIyDreE9s=
Subject key identifier:   36:0A:92:E5:41:BB:92:FA:EE:F5:A9:59:C2:50:C3:F7:1F:04:87:21
Authority key identifier: A5:B2:65:4E:43:2B:74:DC:8D:A6:6D:81:6B:26:0C:FF:C8:17:31:75
Certificate issuer:       /CN=a5b2654e432b74dc8da66d816b260cffc8173175
Certificate serial:       019874BDE0E8801948BDEE78F7A1537AE792
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft
Manifest number:          1614
Signing time:             Mon 04 Aug 2025 11:00:57 +0000
Manifest this update:     Mon 04 Aug 2025 11:00:57 +0000
Manifest next update:     Tue 05 Aug 2025 11:00:57 +0000
Files and hashes:         1: pbJlTkMrdNyNpm2BayYM_8gXMXU.crl (hash: ZSclwMMzZ0ZvESamkErkzI2zNFD+tq4HOopTqsGagbw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:bd:e0:e8:80:19:48:bd:ee:78:f7:a1:53:7a:e7:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5b2654e432b74dc8da66d816b260cffc8173175
        Validity
            Not Before: Aug  4 11:00:57 2025 GMT
            Not After : Aug  5 11:00:57 2025 GMT
        Subject: CN=360a92e541bb92faeef5a959c250c3f71f048721
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:39:ac:80:d5:60:24:d3:23:ab:fc:cb:ad:e6:
                    c2:f3:2a:51:98:a3:67:3b:e2:e3:73:11:18:50:10:
                    c1:ff:12:d0:9a:1e:60:96:f5:26:6e:9b:3c:cf:43:
                    f1:7b:c7:04:0f:0c:44:fd:e0:a6:8b:cc:90:94:bc:
                    71:56:e8:c2:0f:d4:ea:11:53:a2:f9:d4:1e:96:55:
                    22:7d:20:a1:fa:5e:82:3b:5a:de:37:70:8e:1c:07:
                    07:ab:e6:57:bd:92:95:e4:87:38:83:69:4c:10:5a:
                    9f:07:a8:ba:73:74:00:5e:33:e1:a1:0d:dd:e8:11:
                    ef:58:77:fc:09:0d:92:0a:3d:42:ff:85:f0:72:92:
                    19:33:db:47:b8:4c:29:bb:b8:2f:61:96:a9:88:97:
                    ad:79:a9:41:98:65:c0:9c:a0:8a:40:b9:21:9a:49:
                    b5:d7:7b:3d:48:93:79:8b:91:44:fd:0e:aa:d4:79:
                    a5:82:ef:77:c7:22:9a:93:ea:86:de:a5:18:a3:18:
                    d5:d6:5f:4e:10:55:65:68:9a:38:4c:a9:0b:89:20:
                    06:7e:86:70:96:54:5b:a6:ef:a3:9c:07:f6:98:54:
                    c3:eb:e3:69:95:3e:50:4f:e9:db:d9:c7:54:8d:c1:
                    5b:ae:e5:8a:48:46:a0:fe:c7:94:e0:8e:fd:ff:ea:
                    a1:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0A:92:E5:41:BB:92:FA:EE:F5:A9:59:C2:50:C3:F7:1F:04:87:21
            X509v3 Authority Key Identifier:
                keyid:A5:B2:65:4E:43:2B:74:DC:8D:A6:6D:81:6B:26:0C:FF:C8:17:31:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbJlTkMrdNyNpm2BayYM_8gXMXU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/b69811-cf3f-49bc-82ae-e55f9f9169db/1/pbJlTkMrdNyNpm2BayYM_8gXMXU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:62:58:32:b3:4f:55:f4:05:f0:d1:4c:65:50:86:3c:26:b9:
         e8:e8:b5:77:7f:52:49:92:96:c7:fb:47:ff:9e:e8:a3:9e:37:
         05:6b:53:5c:ca:cb:ae:d0:b9:4e:e4:b1:0e:5b:4c:74:1c:c2:
         1f:0d:39:c9:1b:99:5f:49:78:9d:fa:6e:de:31:78:45:69:a2:
         08:14:11:52:d9:5e:f4:91:ee:ff:5e:c9:63:c8:fb:39:d5:da:
         cb:78:58:9f:6b:4e:29:3d:37:49:52:98:15:00:c2:d4:c3:65:
         91:72:40:46:ac:a3:fe:7d:bb:f1:6f:2e:34:d7:d0:c9:08:b8:
         97:1e:a9:59:90:dc:50:b9:1e:11:9c:f3:14:a7:8e:78:74:97:
         11:26:41:a5:c9:2d:4d:cb:7f:06:73:8f:93:7f:be:eb:0c:7a:
         7c:dd:ee:ee:a9:43:9d:df:0a:e6:da:5c:44:d7:75:fd:94:1b:
         62:6c:5e:4f:8c:22:75:7a:2e:38:74:ae:31:92:a8:b0:0d:5f:
         cf:df:65:f1:2c:a5:a5:d6:0e:13:53:4e:1d:1c:74:67:96:b2:
         13:3c:0a:ae:b1:fe:20:5f:dd:a2:0e:a1:5a:b3:4f:e1:00:e1:
         f1:b0:34:d0:a1:1a:79:61:19:ce:f8:95:a2:be:ae:4e:e0:f6:
         2f:d5:f5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:15:21 2025 by rpki-client